Unknown Contact Form by Supsystic

• CVE-2026-115303 Low 3.7 Contact Form by Supsystic < 1.11.1 - Unauthenticated CRLF / Email Header Injection via Reply-To Field Mapping 0.2%
• CVE-2026-115302 Medium 5.3 Contact Form by Supsystic < 1.11.1 - Unauthenticated Arbitrary Statistics Deletion 0.2%
• CVE-2026-115301 High 7.2 Contact Form by Supsystic < 1.11.1 - Admin+ SSTI via Form Text Block 0.4%
• CVE-2026-115300 Medium 4.3 Contact Form by Supsystic < 1.11.1 - Contact Submission and Statistics Deletion via CSRF <0.1%
• CVE-2026-115299 Medium 5.4 Contact Form by Supsystic < 1.11.1 - Arbitrary Plugin Settings Update via CSRF <0.1%
• CVE-2025-15705 Low 3.5 Contact Form by Supsystic < 1.8.0 - Admin+ Stored XSS 0.1%